src/Security/SessionIdleHandler.php line 41

  1. <?php
  3. namespace App\Security;
  5. use Symfony\Component\Routing\RouterInterface;
  6. use Symfony\Component\HttpFoundation\RequestStack;
  7. use Symfony\Component\HttpKernel\Event\RequestEvent;
  8. use Symfony\Component\HttpKernel\HttpKernelInterface;
  9. use Symfony\Component\HttpFoundation\RedirectResponse;
  10. use Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorageInterface;
  12. class SessionIdleHandler
  13. {
  15.     private RequestStack $requestStack;
  17.     private TokenStorageInterface $securityToken;
  19.     private RouterInterface $router;
  21.     private $maxIdleTime;
  24.     public function __construct($maxIdleTime, RequestStack $requestStack, TokenStorageInterface $securityToken, RouterInterface $router)
  25.     {
  26.         $this->requestStack = $requestStack;
  27.         $this->securityToken = $securityToken;
  28.         $this->router = $router;
  29.         $this->maxIdleTime = $maxIdleTime;
  30.     }
  32.     public function onKernelRequest(RequestEvent $event)
  33.     {
  34.         if (HttpKernelInterface::MASTER_REQUEST != $event->getRequestType()) {
  35.             return;
  36.         }
  38.         if ($this->maxIdleTime > 0) {
  39.             $session = $this->requestStack->getSession();
  41.             $session->start();
  42.             $lapse = time() - $session->getMetadataBag()->getLastUsed();
  44.             if ($lapse > $this->maxIdleTime) {
  46.                 $this->securityToken->setToken(null);
  47.                 $event->setResponse(new RedirectResponse($this->router->generate('app_logout'))); // or whatever route you need
  48.             }
  49.         }
  50.     }
  52. }